Merge tag 'v4.3.0' into v4+sylr

v4.3.0

.changelog/11560.txt

@@ -0,0 +1,11 @@
+```release-note:new-resource
+aws_gamelift_script
+```
+
+```release-note:enhancement
+resource/aws_gamelift_fleet: Adds `script_id` argument.
+```
+
+```release-note:enhancement
+resource/aws_gamelift_fleet: Adds `script_arn` attribute.
+```

.changelog/12384.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_iam_user_login_profile: Make `pgp_key` optional
+```

.changelog/12409.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ec2_transit_gateway_vpc_attachments
+```

.changelog/12495.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_opsworks_ecs_cluster_layer
+```

.changelog/13974.txt

@@ -0,0 +1,16 @@
+```release-note:enhancement
+resource/aws_elastic_transcoder_preset: Add plan time validations to `audio.audio_packing_mode`,  `audio.channels`,
+`audio.codec`,`audio.sample_rate`, `audio_codec_options.bit_depth`, `audio_codec_options.bit_order`,
+`audio_codec_options.profile`, `audio_codec_options.signed`, `audio_codec_options.signed`, 
+`container`, `thumbnails.aspect_ratio`, `thumbnails.format`, `thumbnails.padding_policy`, `thumbnails.sizing_policy`,
+`type`, `video.aspect_ratio`, `video.codec`, `video.display_aspect_ratio`, `video.fixed_gop`, `video.frame_rate`,   `video.max_frame_rate`,  `video.padding_policy`, `video.sizing_policy`, `video_watermarks.horizontal_align`, 
+`video_watermarks.id`, `video_watermarks.sizing_policy`, `video_watermarks.target`, `video_watermarks.vertical_align`
+```
+
+```release-note:enhancement
+resource/aws_elastic_transcoder_preset: Allow `audio.bit_rate` to be computed.
+```
+
+```release-note:bug
+resource/aws_elastic_transcoder_preset: Allow `video_codec_options` to be empty.
+```

.changelog/16185.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iam_service_specific_credential
+```

.changelog/16386.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_internet_gateway_attachment
+```
+
+```release-note:note
+resource/aws_internet_gateway: Set `vpc_id` as Computed to prevent drift when the `aws_internet_gateway_attachment` resource is used
+```

.changelog/16640.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_service
+```

.changelog/17039.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_vpc_endpoint_policy
+```

.changelog/17732.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_ssm_association: Add plan time validation to `association_name`, `document_version`, `schedule_expression`, `output_location.s3_bucket_name`, `output_location.s3_key_prefix`, `targets.key`, `targets.values`, `automation_target_parameter_name`
+```
+
+```release-note:enhancement
+resource/aws_ssm_association: Add `wait_for_success_timeout_seconds` argument
+```
+
+```release-note:enhancement
+resource/aws_ssm_association: Add `arn` attribute
+```

.changelog/18043.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_instance: Allow updates to `user_data` and `user_data_base64` without forcing resource replacement
+```

.changelog/20913.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_dms_endpoint: Add `s3_settings.add_column_name`, `s3_settings.canned_acl_for_objects`, `s3_settings.cdc_inserts_and_updates`, `s3_settings.cdc_inserts_only`, `s3_settings.cdc_max_batch_interval`, `s3_settings.cdc_min_file_size`, `s3_settings.cdc_path`, `s3_settings.csv_no_sup_value`, `s3_settings.csv_null_value`, `s3_settings.data_page_size`, `s3_settings.date_partition_delimiter`, `s3_settings.date_partition_sequence`, `s3_settings.dict_page_size_limit`, `s3_settings.enable_statistics`, `s3_settings.encoding_type`, `s3_settings.ignore_headers_row`, `s3_settings.include_op_for_full_load`, `s3_settings.max_file_size`, `s3_settings.preserve_transactions`, `s3_settings.rfc_4180`, `s3_settings.row_group_length`, `s3_settings.timestamp_column_name`, `s3_settings.use_csv_no_sup_value` arguments
+```

.changelog/21295.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Add `delete_unused_fm_managed_resources` argument
+```

.changelog/21299.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_fms_policy: Add `tags` argument and `tags_all` attribute to support resource tagging
+```

.changelog/22440.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_cloudformation_stack_set: Add `call_as` argument
+```

.changelog/22490.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_cloudtrail_event_data_store
+```

.changelog/22756.txt

@@ -0,0 +1,27 @@
+```release-note:new-resource
+aws_ec2_transit_gateway_multicast_domain
+```
+
+```release-note:new-resource
+aws_ec2_transit_gateway_multicast_domain_association
+```
+
+```release-note:new-resource
+aws_ec2_transit_gateway_multicast_group_member
+```
+
+```release-note:new-resource
+aws_ec2_transit_gateway_multicast_group_source
+```
+
+```release-note:new-data-source
+aws_ec2_transit_gateway_multicast_domain
+```
+
+```release-note:enhancement
+resource/aws_ec2_transit_gateway: Add `multicast_support` argument
+```
+
+```release-note:enhancement
+data-source/aws_ec2_transit_gateway: Add `multicast_support` attribute
+```

.changelog/22761.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_connect_security_profile: add `permissions` attribute to read
+```

.changelog/22821.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_connect_queue: The `quick_connect_ids` argument can now be updated in-place
+```

.changelog/22874.txt

@@ -0,0 +1,7 @@
+```release-note:new-resource
+aws_grafana_workspace
+```
+
+```release-note:new-data-source
+aws_grafana_workspace
+```

.changelog/22960.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_sagemaker_endpoint_configuration: Emptiness check for arguments, Allow not passing `async_inference_config.kms_key_id`.
+```

.changelog/22963.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_trigger: Add `event_batching_condition` argument.
+```

.changelog/22964.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_glue_catalog_database: Add support `create_table_default_permission` argument
+```

.changelog/22965.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_imagebuilder_container_recipe
+```

.changelog/22966.txt

@@ -0,0 +1,6 @@
+```release-note:enhancement
+resource/aws_gamelift_build: Add import support
+```
+```release-note:enhancement
+resource/aws_gamelift_build: Add `object_version` argument to `storage_location` block.
+```

.changelog/22967.txt

@@ -0,0 +1,11 @@
+```release-note:enhancement
+resource/aws_gamelift_fleet: Add `certificate_configuration` argument
+```
+
+```release-note:enhancement
+resource/aws_gamelift_fleet: Add plan time validation to `ec2_instance_type`
+```
+
+```release-note:enhancement
+resource/aws_gamelift_fleet: Add import support
+```

.changelog/23035.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_appmesh_route: Handle zero `max_retries`
+```

.changelog/23039.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_rds_cluster: Fix crash when configured `engine_version` string is shorter than the `EngineVersion` string returned from the AWS API
+```

.changelog/23040.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_imagebuilder_container_recipe
+```

.changelog/23098.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_backup_report_plan
+```

.changelog/23111.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_pipeline: Add `container_recipe_arn` argument
+```
+
+```release-note:enhancement
+data-source/aws_imagebuilder_image_pipeline: Add `container_recipe_arn` attribute
+```

.changelog/23113.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iam_virtual_mfa_device
+```

.changelog/23120.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Correctly handle the `days` value of the `rule` `transition` configuration block when set to `0`
+```

.changelog/23127.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_vpn_connection: Add support for `ipsec.1-aes256` connection type
+```

.changelog/23130.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+data-source/aws_kms_public_key: Add `public_key_pem` attribute
+```

.changelog/23134.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_imagebuilder_container_recipes
+```

.changelog/23144.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Fix extraneous diffs especially after import
+```

.changelog/23146.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_backup_report_plan
+```

.changelog/23151.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_api_gateway_authorizer: Add `arn` attribute.
+```

.changelog/23161.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_iam_signing_certificate
+```

.changelog/23162.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_ssm_instances
+```

.changelog/23175.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+aws_backup_framework
+```

.changelog/23187.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_autoscaling_group: Disable scale-in protection before draining instances
+```

.changelog/23191.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+provider: Support `ap-northeast-3`, `ap-southeast-3` and `us-iso-west-1` as valid AWS Regions
+```
+
+```release-note:bug
+provider: Use AWS HTTP client which allows IMDS authentication in container environments and custom RootCAs in ISO regions
+```

.changelog/23193.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_backup_framework
+```

.changelog/23195.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+data_source/aws_vpc_ipam_pool: error if no pool found 
+```

.changelog/23202.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_prometheus_workspace: Add `tags` argument and `tags_all` attribute to support resource tagging
+```

.changelog/23212.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+provider: Add `sts_region` argument
+```

.changelog/23232.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Prevent non-empty plans when `filter` is an empty configuration block
+```

.changelog/23235.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_recipe: Update plan time validation of `block_device_mapping.ebs.kms_key_id`, `block_device_mapping.ebs.snapshot_id`, `block_device_mapping.ebs.volume_type`, `name`, `parent_image`.
+```

.changelog/23240.txt

@@ -0,0 +1,4 @@
+
+```release-note:new-data-source
+aws_iam_openid_connect_provider
+```

.changelog/23252.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/aws_s3_bucket_lifecycle_configuration: Ensure both `key` and `value` arguments of the `filter` `tag` configuration block are correctly populated in the outgoing API request and terraform state.
+```

.changelog/23254.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_elasticache_replication_group: Add plan-time validation to `description` and `replication_group_description` to ensure non-empty strings
+```

.changelog/23270.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_servicecatalog_provisioned_product: Add `outputs` attribute
+```

.changelog/23278.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/aws_s3_bucket: Add error handling for `NotImplemented` errors when reading `acceleration_status`, `policy`, or `request_payer` into terraform state.
+```
+
+```release-note:enhancement
+resource/aws_s3_bucket: Add error handling for `MethodNotAllowed` and `XNotImplemented` errors when reading `website` into terraform state.
+```

.changelog/23279.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+ provider: Add `custom_ca_bundle` argument
+ ```

.changelog/23282.txt

@@ -0,0 +1,15 @@
+```release-note:enhancement
+provider: Expands environment variables in file paths in provider configuration.
+```
+
+```release-note:bug
+provider: Setting a custom CA bundle caused the provider to fail.
+```
+
+```release-note:enhancement
+provider: Updates list of valid AWS regions
+```
+
+```release-note:bug
+provider: Credentials with expiry, such as assuming a role, would not renew.
+```

.changelog/23283.txt

@@ -0,0 +1,27 @@
+```release-note:bug
+resource/aws_iam_instance_profile: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_openid_connect_provider: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_policy: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_saml_provider: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_server_certificate: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_service_linked_role: Improve tag handling in ISO regions
+```
+
+```release-note:bug
+resource/aws_iam_virtual_mfa_device: Improve tag handling in ISO regions
+```

.changelog/23293.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/aws_imagebuilder_image_recipe: Add `systems_manager_agent.uninstall_after_build` argument
+```